| PCI 1.2 Build firewall and router configurations that restrict connections between untrusted networks and cardholder data environment | SYSTEM AND COMMUNICATIONS PROTECTION |
| PCI 1.2.1/1.3/1.3.2 Restrict inbound and outbound traffic to that which is necessary for the cardholder data environment | SYSTEM AND COMMUNICATIONS PROTECTION |
| PCI 1.4.a Verify that mobile and/or employee-owned computers have personal firewall installed | |
| PCI 2.2 Develop configuration standards for all system components | |
| PCI 2.2.1 Implement only one primary function per server - 'httpd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.1 Implement only one primary function per server - 'mysqld' | CONFIGURATION MANAGEMENT |
| PCI 2.2.1 Implement only one primary function per server - 'named' | CONFIGURATION MANAGEMENT |
| PCI 2.2.1 Implement only one primary function per server - 'postgresql' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'acpid' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'amanda' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'amd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'anacron' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'apache' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'apmd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'arptables_jf' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'arpwatch' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'atd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'auditd' | AUDIT AND ACCOUNTABILITY |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'autofs' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'avahi-daemon' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'avahi-dnsconfd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'bgpd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'bluetooth' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'bootparamd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'canna' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'capi' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'chargen-udp' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'chargen' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'conman' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'cpuspeed' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'crond' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'cups-config-daemon' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'cups-lpd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'cups' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'cyrus-imapd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'daytime-dgram' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'daytime-stream' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'daytime-udp' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'daytime' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dc_client' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dc_server' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dhcdbd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dhcp6s' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dhcpd' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dhcrelay' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'discard-dgram' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'discard-stream' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dovecot' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'dund' | CONFIGURATION MANAGEMENT |
| PCI 2.2.2 Enable only necessary and secure services, protocols, daemons - 'echo-dgram' | CONFIGURATION MANAGEMENT |
